Description

MySQL 5.0 before 5.0.66, 5.1 before 5.1.26, and 6.0 before 6.0.6 does not properly handle a b'' (b single-quote single-quote) token, aka an empty bit-string literal, which allows remote attackers to cause a denial of service (daemon crash) by using this token in a SQL statement.

Remediation

References

CVE-2008-3963

Related Vulnerabilities

Jboss EAP Deserialization of Untrusted Data Vulnerability (CVE-2016-4978)

Oracle HTTP Server Concurrent Execution using Shared Resource with Improper Synchronization ('Race Condition') Vulnerability (CVE-2014-0226)

WordPress Plugin WP-Stats-Dashboard SQL Injection (2.9.4)

Oracle JRE CVE-2013-0441 Vulnerability (CVE-2013-0441)

WordPress Plugin Accept Signups 'email' Parameter Cross-Site Scripting (0.1)

Severity

Medium

Classification

CVE-2008-3963 CWE-134

Tags

Missing Update Known Vulnerabilities